Detection of no log received

you’d be better off making an rsyslog config that drops the hostname to a log on the graylog server. then having a cron job compare that log to a list of known hostnames, send out an email alert if no match occurs. it will take some development